This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DD3872CD02411F0A1AE6DE4DAE4EC9C.roa
File: 2DD3872CD02411F0A1AE6DE4DAE4EC9C.roa (raw, json)
Hash identifier: dBWTkJfW9VbtJYaXaVArGlLESK16FFouDIUyiEp5LVk=
Subject key identifier: 1C:77:66:5E:72:C2:CB:F7:4E:40:2A:BD:BA:8C:33:0B:B2:A3:06:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AC19
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DD3872CD02411F0A1AE6DE4DAE4EC9C.roa
Signing time: Wed 03 Dec 2025 08:43:46 +0000
ROA not before: Wed 03 Dec 2025 08:43:40 +0000
ROA not after: Sat 07 Mar 2026 08:43:40 +0000
asID: 46071
IP address blocks: 154.209.6.0/24 maxlen: 24
154.209.7.0/24 maxlen: 24
154.210.178.0/24 maxlen: 24
154.210.179.0/24 maxlen: 24
154.210.180.0/24 maxlen: 24
154.210.203.0/24 maxlen: 24
154.210.204.0/24 maxlen: 24
154.210.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109593 (0x1ac19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 3 08:43:40 2025 GMT
Not After : Mar 7 08:43:40 2026 GMT
Subject: CN=692ff842-0b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:af:e3:7c:c2:62:40:48:f0:e6:7c:55:4a:
27:4b:ed:3f:df:65:3f:1e:29:ff:f7:f3:fc:bb:49:
21:29:d8:af:f7:d0:c6:b9:c9:ca:79:91:f3:e3:22:
51:bf:99:2a:74:dc:d7:13:0a:5d:01:6f:5a:bd:19:
4e:d6:71:15:0d:fa:ce:2a:66:3f:d5:92:4e:13:74:
55:a4:12:60:3e:7d:ba:8c:da:f5:48:7f:d5:41:0e:
03:2f:09:b4:8c:32:04:9a:a2:b7:f8:f6:9d:31:fb:
9c:ea:e5:35:85:44:e8:df:1b:2f:c9:88:e8:69:49:
6b:44:b9:9d:01:54:d5:0b:be:03:55:d0:54:7a:e5:
4c:f2:36:62:d7:6c:69:b1:89:41:a6:a0:d1:22:fe:
d0:65:2a:24:87:a4:a8:f7:9b:e1:14:da:49:d9:5f:
02:ee:36:b8:56:40:bc:f1:4d:6c:05:27:65:d0:32:
6a:06:2d:e2:90:ab:5f:64:b5:fc:e5:a3:ab:0c:68:
e4:fb:da:05:45:a5:3e:89:b9:48:97:7a:76:04:0f:
fd:23:a7:58:75:d3:78:5d:b7:33:2c:32:5c:63:3e:
88:78:d1:1e:45:eb:8d:cc:52:9a:85:a4:11:a6:9e:
8e:f0:89:17:36:19:03:31:a6:c5:7c:eb:2c:18:ef:
99:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:77:66:5E:72:C2:CB:F7:4E:40:2A:BD:BA:8C:33:0B:B2:A3:06:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DD3872CD02411F0A1AE6DE4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.6.0/23
154.210.178.0-154.210.180.255
154.210.203.0-154.210.204.255
154.210.222.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:cf:cb:fd:e0:b9:07:b8:cb:f2:67:dc:72:81:62:5a:8a:7f:
3c:4d:07:08:12:39:16:4e:39:45:94:42:3b:8c:d6:ba:1a:af:
8a:19:4f:f5:c2:84:dd:cd:90:87:d7:a6:88:39:7a:77:2a:66:
56:a0:bd:b5:9b:25:d9:3d:96:1c:6e:50:ab:5e:37:70:dd:9d:
4d:24:9f:f4:5e:52:8d:e2:8c:3e:d8:a2:5b:9e:56:ae:27:62:
73:a0:ba:f2:29:e5:a3:82:2e:d9:ea:0c:71:86:9b:e7:f6:d2:
a0:27:e1:50:35:94:61:3b:b7:19:ff:6f:bb:21:15:da:1a:c9:
be:38:10:af:8f:2b:fe:56:19:5c:d6:7b:a0:7d:8f:c7:2d:dc:
f7:68:3b:94:93:41:b4:9a:57:f7:ed:43:cd:4b:4f:65:54:4e:
f2:01:69:43:38:ac:2e:04:f6:4f:c7:ab:c2:ad:40:2c:e3:e7:
fc:a4:e2:50:d1:2b:ad:29:9d:3b:63:29:89:79:3d:f9:9c:ae:
dd:2c:a5:84:07:39:33:b5:bd:14:de:10:f7:6b:dd:4b:13:4e:
34:f3:e3:4f:c1:35:f7:de:d3:d0:db:81:77:bb:d8:2a:c7:02:
4f:c2:7b:7a:bc:ee:5f:3c:2f:04:01:96:a1:30:79:42:1c:cd:
71:91:48:d1
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDAawZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjAzMDg0MzQwWhcNMjYwMzA3MDg0MzQwWjAYMRYw
FAYDVQQDEw02OTJmZjg0Mi0wYjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv6Wv43zCYkBI8OZ8VUonS+0/32U/Hin/9/P8u0khKdiv99DGucnKeZHz
4yJRv5kqdNzXEwpdAW9avRlO1nEVDfrOKmY/1ZJOE3RVpBJgPn26jNr1SH/VQQ4D
Lwm0jDIEmqK3+PadMfuc6uU1hUTo3xsvyYjoaUlrRLmdAVTVC74DVdBUeuVM8jZi
12xpsYlBpqDRIv7QZSokh6So95vhFNpJ2V8C7ja4VkC88U1sBSdl0DJqBi3ikKtf
ZLX85aOrDGjk+9oFRaU+iblIl3p2BA/9I6dYddN4XbczLDJcYz6IeNEeReuNzFKa
haQRpp6O8IkXNhkDMabFfOssGO+ZpQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFBx3
Zl5ywsv3TkAqvbqMMwuyowYpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yREQzODcyQ0QwMjQxMUYwQTFBRTZERTREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQBmtEGMAwDBAGa0rIDBACa
0rQwDAMEAJrSywMEAJrSzAMEAJrS3jANBgkqhkiG9w0BAQsFAAOCAQEAoc/L/eC5
B7jL8mfccoFiWop/PE0HCBI5Fk45RZRCO4zWuhqvihlP9cKE3c2Qh9emiDl6dypm
VqC9tZsl2T2WHG5Qq143cN2dTSSf9F5SjeKMPtiiW55Wridic6C68inlo4Iu2eoM
cYab5/bSoCfhUDWUYTu3Gf9vuyEV2hrJvjgQr48r/lYZXNZ7oH2Pxy3c92g7lJNB
tJpX9+1DzUtPZVRO8gFpQzisLgT2T8erwq1ALOPn/KTiUNErrSmdO2MpiXk9+Zyu
3SylhAc5M7W9FN4Q92vdSxNONPPjT8E1997T0NuBd7vYKscCT8J7erzuXzwvBAGW
oTB5QhzNcZFI0Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:35:17 2025 by rpki-client